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Abstract 

For a fixed odd prime p and a representation g of the absolute Galois 
group of Q into the projective group PGL^Fp), we provide the twisted 
modular curves whose rational points supply the quadratic Q-curves of 
degree N prime to p that realize g through the Galois action on their 
p-torsion modules. The modular curve to twist is either the fiber product 
of the modular curves Xq(N) and X(p) or a certain quotient of Atkin- 
Lehner type, depending on the value of iV mod p. For our purposes, a 
special care must be taken in fixing rational models for these modular 
curves and in studying their automorphisms. By performing some genus 
computations, we obtain from Faltings' theorem some finiteness results on 
the number of quadratic Q-curves of a given degree N realizing g. 

1 Introduction 

Throughout we fix an odd prime p and an algebraic closure Q of Q. For a 
subfield L of Q, we denote by Gl the absolute Galois group Gal(Q/L). We say 
that a non-CM elliptic curve defined over a quadratic field k is a Q-curve of 
degree N if there is a cyclic isogeny of degree N from the curve to its Galois 
conjugate. The p-torsion of a Q-curve E/k of degree N prime to p gives rise to a 
Galois representation 

q e : G Q — > PGL 2 (F P ) 

whose conjugacy class is an invariant of the isomorphism class of E and whose 
restriction to G& is the projective representation obtained from the usual Galois 
action on the p-torsion points of the curve. The procedure to obtain g E is detailed 
in Section El The determinant of qe draws off two different cases, which we call 
cyclotomic and non-cyclotomic, and which correspond to iV being a square mod p 
or not, respectively. These two cases rule most of the structure and contents of 
the rest of sections. 
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The situation just described raises the following inverse problem: find the 
Q-curves of degree N realizing a given projective mod p Galois representation 

g : G Q — > PGL 2 (F p ), 

namely those whose p-torsion points give rise to g in the above sense. The aim of 
this paper is to explain in detail how to produce the moduli spaces whose rational 
points yield the solutions to this problem. Henceforth the term rational stands 
for Q-rational. 

The moduli spaces that we provide are either twists of the modular curve 
X(N,p) obtained as the fiber product of the curves X (N) and X(p), in the non- 
cyclotomic case, or twists of a certain Atkin-Lehner quotient X + (N,p) in the 
cyclotomic case. In Section El we analyze the structure of the subgroup W(N,p) 
of automorphisms on X(N, p) extending the group generated by the Atkin-Lehner 
involution w N on X (N). In Section|3]we fix a suitable rational model for X(N,p) 
and then describe the Galois action on W(N,p). In order to do this, we need 
first to study the action of W(N,p) on the non-cuspidal points of the curve. The 
last two sections explain how to obtain the twisted curves whose non-cuspidal 
non-CM rational points give the Q-curves of degree N realizing g. Section El is 
devoted to the cyclotomic case and Section El to the non-cyclotomic case. They 
also include some finiteness results obtained from Faltings' theorem and from 
some genus computations performed in Section El 

Our moduli approach turns out to be quite effective in the non-cyclotomic 
case, since the quadratic field of definition for the possible Q-curves realizing the 
representation g is uniquely determined and, for every fixed degree N, we just 
need one twist X(N,p) g . For an explicit application we refer to |FGL| . where a 
plane quartic model is provided for the genus-three case X(5, 3) e . 

In the cyclotomic case, one should instead consider two twists X + (N,p) e , 
X + (N, p)' g whose rational points include the cyclic isogenies of degree N between 
elliptic curves over Q realizing g. One may also approach the problem by adding 
a given quadratic field k as extra data: the Q-curves of degree N defined over k 
realizing g are given by the non-cuspidal non-CM rational points on two other 
twisted curves X{N ) p) Bt k , X(N,p)' k . 

2 Projective mod p Galois representations realized by 
^-admissible Q-curves 

The aim of this section is to review the construction of the representation 

Qe : G;: - PGL 2 (F P ) 

attached to a (p-admissible) Q-curve E and to compute its determinant. Up 
to some minor points, the section is mostly a reformulation of known facts that 
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can mainly be found in |ES01j and go back to |Rib92j . The particular case of 



quadratic Q-curves is written down in |Ser 92j using the ideas of |5n"i78]. 



Let E be a Q-curve. By this we mean a non-CM elliptic curve defined over a 
number field L and with an isogeny 

\ a : a E — > E 

for every a in Gq. Without loss of generality, we always take A CT equal to A T 
whenever a and r restrict to the same embedding of L into Q, and one might 
also assume the isogenics X a to be cyclic. We suppose here that the Q-curve E 
is p- admissible, namely that the isogenics A CT can be chosen so that p does not 
divide the degree of any of them. 

For an isogeny ip : E' — > E, let us write </2 _1 for the element (degy?) -1 ® tp 
in Q (g) Hom(E, E'), where (p is the dual isogeny of (p. Since E has no CM, any 
isogeny E' — > E differs from <p by a rational number. Thus, the 2-cocycle of Gq 

c e : (<y, t) i — > A CT a \ T \~l 

takes values in Q*. Let a be a splitting map for the 2-cocycle ce viewed inside 
the trivial cohomology group H 2 (Gq,Q ), that is, a continuous map Gq — >Q 
satisfying 

\ a a \ T \~l = a(a) a(r) a(ffr) -1 

for all a, t in Gq. By taking degrees, one deduces that the map a \— > a(a) 2 /deg A CT 
is a Galois character. In particular, the values taken by a are algebraic integers 
prime to p. So there exist a finite extension ¥ a of F p and a mod p reduction 
map 5 : Gq — ► F * obtained from a fixed embedding of Q into a fixed algebraic 
closure Q p of Q p . 

Consider now the F a -linear action of Gq on F a ® Fp E [p] given by 

(a, 1®P) i— > aiay^X^P). 

By means of the choice of a basis for the F p -module E\p], this action produces a 
linear representation 

PE, a : Gq — > F:GL 2 (F P ) 

defined up to conjugation by matrices in GL 2 (F P ). The corresponding projective 
Galois representation qe is actually given by the induced action 

(a, C) ^ \ a (°C) 

on the projective line 

¥(E[p}) = {CcE[p} | C~W P }. 

This projective representation qe depends on neither the p-admissible system of 
isogenies A CT nor the splitting map a. Further, the following proposition shows 
that qe is an invariant of the p-admissible isogeny class of E. 
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Proposition 2.1 Let E' be an elliptic curve over Q and tp : E' — > E be an 

isogeny of degree prime to p. Then Qe> = Qe- 

Proof. Let (p be the dual isogeny of <p and let \ a and a be as before. Consider 
the 2-cocycle ce> attached to the p-admissible system of isogenies <p \ a a ip for 
the Q-curve E'. Then a deg ip is a splitting map for c& whose reduction mod p 
takes values in the same finite field F as 5. The isomorphism E'\p\ — > E[p\ 
induced by <p extends naturally to an isomorphism Fcg> E'[p] — >F® E[p] that is 
compatible with the corresponding F-linear actions of Gq. So pE, a and pE\ a deg ip 
are conjugated by a matrix in GL 2 (F P ), and the result follows. □ 

Remark 2.2 The (conjugacy class of the) representation pE,a is the linear modp 
representation obtained from the Galois action on the abelian variety of GL2-type 
attached in |Rib92j to the Q-curve E and the splitting map a. Moreover, any 
lifting of qe into GL 2 (F P ) is of the form p E , a for some splitting map a for eg. 

Note that the restriction of ^ to Gi is the projective representation 

~Pe '■ Gl — ► PGL 2 (F P ) 

obtained from the usual Galois action on the p-torsion points of E. In terms 
of number fields, this provides the fixed field of qe with the following property: 
its composite with L is the splitting field of the modular polynomial ^ p {je '■, X) 
over L, where ]e stands for the j-invariant of the elliptic curve E. Whenever L is 
normal over Q and p E is surjective, this property singles out the fixed field of qe 
among all Galois extensions of Q with group PGL^Fp). 

We recall that the determinant of ~p E ls the restriction to G^ of the quadratic 
Galois character 

e : Gq > f;/f; 2 ~ {±1} 

obtained from the mod p cyclotomic character \. The fixed field of e is the only 
quadratic field k p = Q( v /±p ) inside the p-th cyclotomic extension of Q. Let us 
now show that the projective representation g E is odd by first computing the 
determinant of a lifting. 

Proposition 2.3 The determinant of pE,a is the product of the modp cyclotomic 
character x o,nd the character Gq — >¥* defined by a f— > deg X a / 5(cr) 2 . 

Proof. By virtue of the properties of the Weil pairing ( • , • ) E , the equalities 

(Xam,Xa( a Q)) E>p = (°PXK(V))«E, p = ((P>Q)E, P ) X{(7)dCgK 

hold for any two points P, Q in E[p] and any a in Gq. Whenever [P, Q] is a 
basis of E[p], so is [A -(°P), A cr ( Q)]. Moreover, the left-hand term in the above 
equalities is the power of (P, Q) E p to the determinant of the basis change. 
Therefore, the result follows from the definition of pE,a ■ D 
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Corollary 2.4 The Galois representation qe is odd. 

Proof. Since qe does not depend on the p-admissible system of isogenies \ a cho- 
sen, we can take X a as the identity for all a in G^. Fix a splitting map a for the 
2-cocycle ce obtained from the isogenies X a . Note that the restriction of a to Gl 
is then a Galois character. Write <; for the complex conjugation in Gq obtained 
by fixing an embedding Q — >C We must prove the equality det pE, a (s) — — 1. 
Consider the isogeny A f f A f : E — ► E. It is given, on the one hand, by multi- 
plication by a(<j) 2 and, on the other hand, by multiplication by ±degA f . All 
we have to do is to pin down the latter sign. As a complex elliptic curve, E is 
isomorphic to E z = C/(Z + zZ) for some z in the complex upper-half plane EL 
Through this isomorphism, A f ^ A f translates into the isogeny E z — > E z induced 
by multiplication by 5 ^5 for some S in C*. So the above sign is positive and thus 
5(?) 2 = degA f in ¥ p . Since x(s) — — 1> the result follows from Proposition I2.3I D 

Let deg : Gq — >Q*/Q* 2 be the degree character induced by any p-admissible 
system of isogenies A CT : a E — >E. Then, consider the mod p degree character 

deg p : Gq — > F;/F p * 2 ~ {±1} 

obtained from deg by composition with the natural map Q*/Q* 2 — >Qp/Qp 2 - 
The following statement is a straightforward consequence of Proposition 12.31 

Corollary 2.5 The determinant of qe is the product edeg p . 

Remark 2.6 If the map deg is not trivial, its fixed field K^eg is a composite 
of quadratic fields Q(- N /ai ), . . . , Q(v^m ), where 2 m is the degree of K deg over Q. 
For every I — 1, ... , m , take o~i in Gq restricting to the non-trivial automorphism 
of K^g that fixes y/Eh for h I. Then, the map deg p is the product of the 
quadratic Galois characters attached to the extensions <Q)(y/ai) for which deg\ ai 
is not a square mod p. 

We say that a projective mod p Galois representation 

q : Gq — > PGL 2 (F p ) 

is realized by a (p-admissible) Q-curve E ii q e = Q, where this equality makes 
only sense up to conjugation in PGL 2 (F p ). The rest of sections are devoted to the 
particular case of quadratic Q-curves. Assume q to be realized by a p-admissible 
Q-curve of degree N, that is, by a non-CM elliptic curve defined over a quadratic 
field and with a cyclic isogeny to its Galois conjugate of degree iV prime to p. 
From Corollary 12.51 and Remark 12.61 q has determinant e if and only if iV is a 
square mod p, and otherwise any Q-curves of degree iV realizing g must be defined 
over the fixed field of the quadratic character e det g. We refer to the first case 
(N square mod p) as the cyclotomic case, and to the second one (N non-square 
mod p) as the non- cyclotomic case. 
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3 Automorphisms of the modular curve X(N,p) 

Let N > 1 be an integer prime to p. Let Xq(N), X(p) and X(l) be the modular 
curves attached to the congruence subgroups Tq(N), T(p) and SL 2 (Z), respec- 
tively. We denote by X(N,p) the modular curve attached to the congruence 
subgroup r (iV) nr(p), namely the fiber product of X (N) and X(p) over X(l) : 

X(N,p) 




X (N) X{p) 




X(l) 

The aim of this section is to introduce a certain group W(N, p) of automorphisms 
on X(N,p). We also compute the genus of this curve. 

As a complex curve, X(N,p) is a Galois covering of Xq(N) with group Q(N,p) 
given by the quotient T (N)/ ± r (iV) n T(p). Since the mod p reduction map 
SL 2 (Z) — >SL 2 (F P ) induces the exact sequence 

i — > ±r (iv)nr(p) — > r (iv) — > psl 2 (f p ) — > i, 

there is a canonical isomorphism 

g(N,p) ~ PSL 2 (F P ). 

We recall that Q(N,p) consists of the automorphisms <? on X(N,p) for which 
the following diagram commutes: 

X(N,p) 9 - *X(N,p) 




X (N) 

Let w N be the Atkin-Lehner involution on X (N) and denote by X + (iV) the 
corresponding quotient. For any integers a,b,c,d satisfying ad N — hep 2 = 1 
and d = ±1 (mod p), the action of the matrix 

/ aN bp\ 
\cpN dNJ 

on the complex upper-half plane H defines an automorphism d on X(N,p) ex- 
tending w N , namely making the following diagram commutative: 

X(N,p)^X(N,p) 
X (N)^+X (N) 
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Indeed, one can check that the above matrix lies in the normalizer of r (A r )nr(p) 
inside PSL 2 (R). Hence, the covering X(N,p) — >X + (N) has as many automor- 
phisms as its degree, which means that it is a Galois covering. Let W(N,p) 
denote its automorphism group: 

X(N,p) 

)Q{N,p) 

w(N, P )[ X (N) 



X+(N) 

The group W(N,p) contains Q(N,p) as a subgroup of index two whose comple- 
ment consists of the automorphisms on X(N, p) extending w N . 

Proposition 3.1 The group Q(N,p) is a direct factor of W(N,p) if and only 
if N is a square mod p. More precisely, the structure of W(N,p) is as follows: 

■ In the cyclotomic case, there is a unique involution w on X(N,p) such that 

W{N,p) = G{N,p) x (w). 

■ In the non- cyclotomic case, 

W(N,p) ~ PGL 2 (F P ). 

In the first case, the quotient curve X(N,p)/w is a Galois covering of X + (N) 
with group Q(N,p). In the second case, the quotient of X(N,p) by an involution 
in W(N,p) is never a Galois covering of X + (N). 

Proof. Viewed as the quotient SL 2 (F P )/{±1}, the group PSL 2 (F P ) is generated 
by the matrices 

r -(si> ^Gt 

On the other hand, the determinant GL 2 (F P ) — >¥* induces an exact sequence 



PSL 2 (F p ) 



PGL 2 (F p ) 



det 



f;/f; 



*2 



so that PSL 2 (F P ) can be identified with a subgroup of PGL 2 (F P ) of index two 
whose complementary subgroups are those generated by a conjugate of the matrix 



V 



-v 

1 



where v is a non-square in F*. Since one has the relations VT = U~ v 1 V and 
V U = T~ v V, a system of generators for PGL 2 (F p ) is given by V and either T 
or U. Now, Q(N,p) is generated by the automorphisms defined by the matrices 

Tn = (o l)' Un = (nn 1 

in Tq(N), where N G Z is any inverse of N mod p. To give a complementary sub- 
group for Q(N,p) inside W(N,p), let us consider separately the two possibilities 
for N mod p : 

• If iV is a square mod p, then it is also a square mod p 2 . Let a, b be any 
integers satisfying a 2 N — bp 2 = 1. Then, the matrix 

piV aiV 

defines an involution w on X(N,p) extending w N . Moreover, w commutes 
with the automorphisms defined by T N and U N , so it generates a direct 
cofactor of Q(N,p) inside W(N,p). The uniqueness of w comes from the 
fact that PSL 2 (F p ) has trivial center. 

• If TV is not a square mod p, then neither is N. Moreover, the matrix 

Vn ~ \N 

which defines an involution on X(N,p) extending w N , satisfies the relations 
V N T N = U~ N V N and V N U N = T~ N V N inside W(N,p). These are pre- 
cisely the relations that the matrix V, for v equal to mod p, satisfies with 
the generators T, U of PSL 2 (F P ). Hence, the group W(N,p) is isomorphic 
to PGL 2 (F P ). 

The last assertion in the statement follows from the group structure of W(N,p) : 
in the first case, the subgroup (w) is normal, while in the second case W(N,p) 
has no normal subgroups of order two because it has trivial center. □ 

Remark 3.2 The matrices Z N and V N in the proof of Proposition 13. II have de- 
terminant N. Thus, in the same way as the automorphisms in Q(N,p) are defined 
by matrices in ro(-/V) acting on H, the automorphisms on X(N,p) extending w N 
are defined by matrices in M 2 (Z) with determinant iV and hence lying in GL 2 (F p ) 
when reduced mod p. So we have a mod p reduction map 



W(N,p) — ► PGL 2 (F 



whose restriction to Q(N,p) is the canonical isomorphism onto PSL 2 (F P ). In 
the non-cyclotomic case, this map is the isomorphism W(N,p) ~ PGL 2 (F P ) 
constructed in the proof of Proposition l3.ll We keep this canonical isomorphism 
throughout the rest of the paper. 
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Remark 3.3 In the non-cyclotomic case, all involutions on X(N,p) extend- 
ing w N are conjugated inside W(N,p). Hence, their defining matrices in M 2 (Z) 
can be obtained conjugating the matrix V N in the proof of Proposition 13.11 by 
matrices in Tq(N). So they can be chosen to be of the form 



where a, b, c are integers satisfying a 2 N + bc = — 1. This fact is used in the proof 
of Proposition 14.31 

In the cyclotomic case, let us write X + (N, p) for the quotient of X(N,p) 
by the only involution w in the center of the group W(N,p). To conclude this 
section, we give a formula for the genus of X(N,p) and compute the values of N 
and p for which the curves X(N,p) and X + (N,p) have genus zero or one. In 
the proof of Proposition 13.41 we recall the description of the cusps of X (N). We 
refer to |Gon91j for this, as well as for the action of the Atkin-Lehner involutions 
on the set of cusps. Both things are used in the proof of Proposition 13.71 

Proposition 3.4 The genus of the modular curve X(N,p) is 



where (a,b), <p(r) and ip(N) are the usual notations for the greatest common 
divisor of the integers a and b, the order of the group (Z/rZ)* and the index 
of r (iV)/{±l} in PSL 2 (Z) ; respectively. 

Proof. The number of cusps of Xq(N) is ^2<p(h n ), where the sum is taken over 
the positive divisors n of N, and h n stands for (n,N/n). For every divisor n, 
there is exactly one cusp for each integer m in a system of representatives in Z of 
the group (Z/ft, n Z)*. We just take the integer m = 1 whenever <p(h n ) = 1. Any 
such integer m can be chosen prime to n, and the corresponding cusp is then 
represented by the rational number m/n. The ramification degree of this cusp 
over X(l) is N/{nh n ). On the other hand, the cusps of X(p) have ramification 
degree p over X(l). Thus, since N is prime to p, the cusps of X(N,p) also 
have ramification degree p over X (N). Moreover, X(p) has no elliptic points, so 
neither has X(N,p). Lastly, the degrees of the coverings X(N,p) — >Xq(N) and 
X (N) — ►-X'(l) are p (p 2 — l)/2 and ip(N), respectively. Hence, the proposition 
follows from the Hurwitz formula applied to the map X(N,p) — >X(1). □ 

Corollary 3.5 The modular curve X(N,p) has genus greater than one, except 
for the genus-zero case X(2, 3) and the elliptic case X(4, 3). 



aN 
cN 



aN 




0<n \N 
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Proof. Since the genera of X(p) and X (N) are greater than one for p > 5 and 
N > 49, respectively, one only has to check the values that Proposition 13 .41 yields 
in the remaining cases. □ 

Lemma 3.6 For an odd prime p and an integer N > 1 prime to p, consider the 
Atkin-Lehner involution w N on the modular curve X (pN). The only pairs (N,p) 
for which the quotient curve Xq(j>N)/w n has genus zero are (2,3), (4,3), (5,3), 
(8,3), (11,3), (2,5), (4,5) and (3,7). 

Proof. For every integer D > 71, the modular curve X (D) has positive genus 
and is neither elliptic nor hyperelliptic Ugg74| . For each odd prime p and each 
integer N prime to p such that pN < 71 , one can then use the formulae in |Klu77j 
or the tables STN9 2] to conclude the lemma. □ 

Proposition 3.7 The curve X + (N,p) has genus greater than one, except for the 
genus-zero case X + (4, 3). 

Proof. The involution w, which is defined by the matrix Z N in the proof of 
Proposition 13. 1| restricts to the Atkin-Lehner involution w N on Xo{pN), so it in- 
duces a Galois covering X + (X, p) — >X (pN)/w N . On the other hand, the cusps 
of X (pN) that ramify on X(N,p) are those of the form m/n with p dividing n, 
and the ramification degree is always p (cf. the proof of Proposition 13. 4|) . In par- 
ticular, the Hurwitz formula implies that X (pN)/w N has genus zero whenever 
X + (X, p) has genus less than two. By Lemma f3.6| the only pairs (N,p), with N 
prime to p and square mod p, for which X (pN) /w N has genus zero are (4,3) 
and (4,5). In the first case, the involution w fixes the cusp 1/2, so X + (4, 3) is 
a genus-zero quotient of the elliptic curve X(4,3). Let us now study the second 
case, for which we consider the following commutative diagram: 

X(4,5) 



X (20) 




X+(4,5) 



10 

X (20)/w 4 

The only ramified points of the covering X(4, 5) — >Xq(20) are cusps. Moreover, 
it can be checked that the points lying above the two cusps 1/2, 1/10 fixed by 
are also fixed by the involution w. Thus, the only ramified cusps of the covering 
X + (4, 5) — ► X (20)/u>4 are the points above 1/5 and 1/10, all of them with 
ramification degree 5. Then, the Hurwitz formula shows that there must be ten 
more ramified points, necessarily with ramification degree 2 and lying above the 
two non-cuspidal points on X (20) fixed by w±, hence the genus of X + (4, 5) is 
four. Notice that there are no other ramified points because the number of points 
on X (20) fixed by w 4 is exactly four (cf. |Klu77j or |STN92| ). □ 
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4 A rational model for the modular curve X(N,p) 



This section deals with the rationality over Q for the curve X(N,p) as well as 
for the automorphism group W(N, p) introduced in the previous section: we fix 
a certain rational model for X(N,p) that makes the automorphisms in W(N,p) 
be defined over k p . Recall that k p stands for the only quadratic field inside the 
p-th cyclotomic extension of Q. We denote by ( p the root of unity e 2n ^ p . 

Since X(N,p) is the fiber product of the modular curves X{p) and X (N) 
over X(l), a rational model for the first curve is determined by fixing rational 
models for the other three curves. Recall that the function field of X(l) is gener- 
ated over Q by the elliptic modular function j. For X Q (N), consider the canoni- 
cal rational model given by the function field Q{j,j N ), where j N is the modular 
function defined by j N (z) =j(Nz) for z in the complex upper-half plane H. As 
for X(p), the rational model that we fix satisfies the following property: its ex- 
tension to k p gives by specialization over an elliptic curve E in X(1)(Q) the fixed 
field of the projective mod p Galois representation p E attached to the p-torsion 
points of E. This model for X(p) is obtained as the following particular case of 
a general procedure that follows Section II. 3 in Lig77| and Section 2 in |Maz77j . 

Fix a non-square v in ¥* and take a matrix V in GL 2 (Fp) of order two in 
PGL 2 (F P ) and with det(V) = v. Without risk of confusion, we often identify the 
matrix V, up to a sign, with its image in PGL 2 (F P ). Define Hy as the inverse 
image in GL 2 (F p ) of the subgroup generated by V in PGL 2 (F p ) : 



¥* U F * V. 



Up to conjugation, H v is the only subgroup of GL 2 (F p ) containing the center 
and reducing inside PGL 2 (F P ) to a complementary subgroup of PSL 2 (F P ). The 
group Hy defines, as shown in the following diagram, a rational model Xy(p) 
whose Q-isomorphism class does not depend on the choice of the matrix V: 



H V /{±1} 



®(X v (p)) 



Q(Cp) (*(p)) 

f;/{±i} 

k p (Xy( P )) 



PSL 2 (F P ) 



PGL 2 (F P ) 



k p (X(l)) 



QW)) 



n 



Here Q(Cp) {X(p)) stands for the field of modular functions for T{p) whose Fourier 
expansions have coefficients in Q(( p ). This is a Galois extension of Q (X(l)) with 
group GL 2 (F P )/{±1} and the function field of Xy[jp) is then the fixed field by 
the subgroup Hy/{±1}. 

Although we should denote by Xy(N, p) the rational model for X(N,p) ob- 
tained from X v (p), we just write X(N,p) for simplicity. Without loss of gen- 
erality, we always take the above non-square v equal to N^ 1 mod p in the 
non-cyclotomic case. Note that the map X(N,p) — ► X (N) is defined over Q 
and that the function field k p (X(N,p)) is a Galois extension of Q (Xq(N)) with 
group PGL 2 (F P ). In particular, the Galois action on the automorphism group 
6(N,p) factors through Gal(fc p /Q). 

The non-cuspidal complex points on X(N,p) are in bijection with the isomor- 
phism classes of triples 

(E, C, [7i,T 2 ] v ), 

where E is a complex elliptic curve, C is a cyclic subgroup of E(C) of order N, 
[Ti, T 2 ] is a basis for E[p] and [Ti, T 2 ]y is the corresponding orbit inside E\p] xE[p] 
by the action of Hy. Here Hy is viewed as a subgroup of automorphisms of E[p] 
through the isomorphism GL 2 (F P ) ~ Aut(£'[p]) fixed by the basis [Ti, T 2 ], so that 

[Ti,T 2 ] v = {[rT 1; rT 2 ], [rT Xl rT 2 \V \ r G F p * } . 

Two triples of the form (E, C, [Ti, T 2 ]y) are isomorphic if there is an isomorphism 
between the corresponding elliptic curves interchanging the cyclic subgroups and 
the iTy-orbits. 

This bijection is compatible with the usual Galois actions. Thus, a point 
on X(N,p) given by a triple as above with j% ^ 0, 1728 is defined over a number 
field L if and only if the elliptic curve E is defined over L, the subgroup C is 
G^-invariant and the image of the linear Galois representation 

Pe '■ Gx > GL 2 (F P ) 

attached to E[p] lies inside a conjugate of the subgroup H v . 

We can always assume that the basis [Ti,T 2 ] in a triple (E, C, [Ti,T 2 ]y) is, 
inside the corresponding ify-orbit, the only one up to a sign that is sent to ( p by 
the Weil pairing. The Galois action on the non-cuspidal points of X(N,p) should 
then be written accordingly: an automorphism o of C takes any such a triple to 
that given by the elliptic curve a E, the subgroup a C and the ify-orbit of either 
the basis [r _1 T^r -1 CT T 2 ] or the basis [(v r) _1 Ti, (v r) _1 CT T 2 ] V, depending on 

2 2 

whether % p = Q or % p = Q r for some r in F* respectively. 

The action of the automorphism group Q(N,p) on the non-cuspidal points 
of X(N,p), and then the Galois action on G(N,p), are stated in Proposition 14. II 
and Corollary 14.21 respectively. The symbol " stands henceforth for the matrix 
(anti) involution given by 

*-(: ;k ;)■ 
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where *M is the transpose of the matrix M. Alternatively, it can be defined as 
follows: 

Proposition 4.1 ^4n automorphism in Q(N,p) represented through the canon- 
ical isomorphism Q(N,p) ~ PSL 2 (F P ) fry a matrix 7 m SL 2 (F P ) takes a point 
(E, C, [Ti,T 2 ]y) on X(N,p) to the point given by the elliptic curve E, the sub- 
group C and the Hy -orbit of the p-torsion basis [Ti, T 2 ] 7. 

Proof. Take any matrix ( a t) in SL 2 (Z) reducing mod p to 7. The triple 
(E, C, [Ti,T 2 ]v) is isomorphic to one of the form 

(E z , (1/N), [l/p, z/p] v ) 

for some z in H, where E z stands for the complex elliptic curve defined by the 
lattice Z + z Z. The automorphism in the statement sends the pair given by z to 
that given by 

. a z + b 
z = 7 ■ 

cz + a 

Then, the endomorphism of C defined by multiplication by c z + d extends to an 
isomorphism E z > — >E Z that preserves the subgroup (1/N) and sends the basis 
[l/p, z'/p] of E z i[p] to the basis 

[(d + cz)/p, (b + az)/p] = [l/p, z/p}^ 

of E z [p], so the result follows. □ 

Corollary 4.2 An automorphism in Q(N,p) represented through the canonical 
isomorphism Q(N,p) ~ PSL 2 (F p ) by a matrix 7 in SL 2 (F p ) is sent by the non- 
trivial element in Gal(/c p /Q) to the automorphism in Q(N,p) corresponding to 
the matrix V^V in PSL 2 (F P ). 

Proof. Denote by g the automorphism represented by the matrix 7. Take any 
element a in Gq such that % p = and let ■y a be a matrix in SL 2 (F p ) represent- 
ing the automorphism a g e Q(N,p). Take also any point P in X(N,p)(Q) given 
by a triple (E, C, [T u T 2 ] v ) with j E 0, 1728. The identity a ( g (P) ) = a g ( a P) 
leads, by means of Proposition 14. 1[ to an automorphism of the elliptic curve a E 
interchanging the ify^orbits of the p-torsion bases [t> -1 u T\,v~ x °"T 2 ] 7 V and 
[y- 1 a T 1 ,v- 1 a T 2 ] V%. This yields the identity % = V^V in PSL 2 (F P ). □ 

From now on, we fix as follows an involution w on X(N,p) extending the 
Atkin-Lehner involution w N on X (N). Recall that W(N,p) stands for the group 
of the Galois covering X(N,p) — >X + (N), where X + (N) is the quotient of Xq(N) 
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by w N . In the cyclotomic case, we take as w the only involution in the center 
of W(iV, p) (cf. Proposition 13. 1J) and denote by \/N a square root of N mod p. 
In the non-cyclotomic case, we take as w the involution corresponding to the 
matrix V through the canonical isomorphism W(N,p) ~ PGL 2 (F P ) (cf. Re- 
mark E3| ■ Recall that, in the second case, det(V) is taken to be iV -1 mod p. 

Proposition 4.3 The involution w takes a point (E, C, [T 1 ,T 2 ]vO on X(N,p) 
to the point given by the elliptic curve E/C, the subgroup E[N]/C and the 
Hy-orbit of the image in E/C of the following p-torsion basis: 

■ [y/~N Ti, y/N T 2 ] in the cyclotomic case. 

■ [T 1; T 2 ] V in the non-cyclotomic case. 

Proof. According to Remark 13.31 and the proof of Proposition 13-H the involu- 
tion w is always defined by the action on H of a matrix in M 2 (Z) of the form 

faN b \ 
\cN dNJ' 

with ad N — be = 1. Denote by 7 the reduction mod p of this matrix. We now 
proceed as in the proof of Proposition 14.11 : the given triple is isomorphic to one 
of the form 

(E z , (L/N), [1/p, z/p] v ) 

for some z in H, where E z stands for the complex elliptic curve defined by the 
lattice Z + z Z. The involution w sends the triple given by z to that given by 

, _ aNz+b 
Z ~ cNz+ dN ' 

Then, the endomorphism of C defined by multiplication by cz + d extends to an 
isomorphism 

E z , — > E z /(1/N). 

This isomorphism sends the subgroup (1/iV) of E z > to the image of E Z [N] under 
the isogeny E z — >E Z / (1/N). Also, it sends the basis [1/p, z'/p] of E z /\p] to the 
image of the basis 

[(d + cz)/p, (N- 1 b + az)/p] = [1/p, z/p}N- 1 ^ 

of £/ z [p]. In the cyclotomic case, d = a, c = p and b is a multiple of p, so that 
a 2 equals iV _1 mod p and the matrix y/~N 7 is trivial in PSL 2 (F P ). In the 
non-cyclotomic case, we have 7 = ±iV V. This completes the proof. □ 
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Corollary 4.4 The involution w is defined over Q. 

Proof. Take any automorphism o in Gq. Since w N is defined over Q, a w is still 
an involution in W(N,p) \ Q{N,p). Let P be a non-CM point in X(N,p)(Q) 
given by a triple (E, C, [Ti,T 2 ]y). For a fixed model of the elliptic curve E/C, 
an isogeny A : E — >E/C with kernel C is determined up to a sign. One has the 
conjugate isogeny "A: a E — > a (E/C). Using Proposition l4.3l and the isomorphism 
a E/ a C — > a (E/C) induced by °A, we can verify case by case that °P has the same 
image by both w and °w. Consider, for instance, the cyclotomic case and assume 

2 

% p = for some r in F*. Then, the point °P is sent to the isomorphism class 
of the triple given by the elliptic curve a (E/C), the cyclic group a X( a E[N]) and 
the ify-orbit of the basis 

[(rVN)- 1 (rVN)- 1 °A( CT T 2 )]. 

By Proposition 14.11 this implies that the matrix in PSL 2 (F p ) corresponding to 
the automorphism °w w in Q (N, p) is the identity, and the result follows. □ 

Remark 4.5 We can conclude that the Galois covering X(N,p) — >X + (N) 
is defined over k p . In other words, the function field k p (X(N,p)) is a Galois 
extension of k p (X + (N)), with group (anti) isomorphic to W(N,p). As a matter 
of fact, k p (X(N,p)) is a Galois extension of Q (X + (N)). 

Let us finish this section by reviewing the moduli interpretation of the rational 
points on X + (N). The non-cuspidal points of X (N)(C) are in bijection with the 
isomorphism classes of pairs (E,C), where E is a complex elliptic curve and C 
is a cyclic subgroup of E(C) of order N. Such a point is defined over a number 
field L if and only if E and C are defined over L, which means that a E = E and 
"C = C for all a in G L . A point on X(N,p) given by a triple (E, C, [T U T 2 ] V ) 
has image on X (N) given by the pair (E,C). In particular, the involution w N 
sends this pair to (E/C, E[N\/C). 

Let E be an elliptic curve defined over L, and let E — > E' be an isogeny 
with cyclic kernel C of order N. Assume that E has no CM, so that an isogeny 
from E to any elliptic curve is determined up to a sign by its degree. Then, the 
subgroup C is defined over L if and only if E' admits a model over L. 

Now, suppose that E and E' are defined over a quadratic field k, so that the 
pair (E,C) defines a fc-rational point P on Xq(N). This point is rational if and 
only if both E and E' have a model over Q. In this case we say that the couple 
{E, E'} is a fake Q-curve of degree N. Otherwise, the image of P on X + (N) is 
rational if and only if E' is isomorphic to the Galois conjugate V E of E. Indeed, 
since E has no CM, an isogeny fi: E — > V E with kernel C sends E[N] to U C, 
so the existence of such an isogeny /i amounts to the equality w N (P) = V P 
in Xo(N)(k). Thus, every non-cuspidal non-CM rational point on X + (N) comes 
from a pair (E,C) on X (iV) defined over some quadratic field and yielding a 
(possibly fake) Q-curve of degree N. 
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5 The twisted curves in the cyclotomic case 



Assume iV to be a square mod p. The structure of this section is as follows. We 
first obtain from a modular point of view the fixed field of the Galois represen- 
tation g E attached in Section to a Q-curve E of degree N. Next, we produce 
the twisted modular curves whose non-cuspidal non-CM rational points give the 
Q-curves of degree N realizing a fixed projective mod p Galois representation 
with cyclotomic determinant. We also include a result on the finiteness of the 
number of such Q-curves. 

Recall that X + (N, p) denotes the quotient of X(N,p) by the involution w. 
The induced map X + (N, p) — >X + (N) is a Galois covering with automorphism 
group S(N,p) and hence defined over k p (cf. Proposition 13. II and Remark |4.5|) . 
The function field k p (X + (N,p)) is in fact a Galois extension of Q (X + (N)), with 
group PGL 2 (F p ) : 

k p (X(N,p)) 

G(N,p) \ 

;-PGL 2 (F p ) 

.(*)) / 

Q(X+(N)) 



PGL 2 (F P ) : 




Proposition 5.1 The function field k p (X + (N,p)) produces, by specialization 
over a rational point on X + (N) corresponding to a Q-curve E, the fixed field 
of the Galois representation qe- 

Proof. Let £ be a Q-curve of degree N defined over a quadratic field k. Fix 
an automorphism v in Gq \ G& and an isogeny fi : E — > V E of degree N. If we 
let C be the kernel of /i, the pair (E, C) defines a fc-rational point on X (N) with 
rational image on X + (N). The preimages on X + (N, p) of this rational point 
are given by the couples {P,w(P)} for all points P on X(N,p) represented by 
a triple of the form (E, C, [Ti,T 2 ]y). If we denote by H the subgroup of Gk p 
fixing those couples, what the proposition asserts is that H equals the kernel 
ot qe- This kernel is indeed a subgroup of Gk p because the fixed field of det qe 
is k p (cf. Corollary 12. 5|) . For a point P as above, w(P) is given by the triple 

( U E, U C, [VN' 1 ^), VN~ 1 ii{T 2 )] v )- Take now any a in G kp , so that % p = (f 
for some r in F p *. If o G G&, then o G H if and only if °P = P, namely if and 
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only if U T = ±rT for all points T in E[p\. If a <^L G&, then a £ H if and only if 

°P = w(P), namely if and only if a T = ±r \J~N /i(T) for all points T in E[p\. 
Therefore, the result follows from the definition of qe- □ 

Suppose that we are now given a Galois representation 

g : G Q — > PGL 2 (F P ) 

with cyclotomic determinant, which means that the fixed field of det g is For 
the moduli problem of classifying the Q-curves of degree N realizing g, we twist 
the curve X + (N, p) by certain elements in the cohomology set if 1 (GQ, Q(N,p)). 
Recall that the twists of a curve defined over Q, up to Q-isomorphism, are in 
bijection with the elements in the first cohomology set of Gq with values in the 
automorphism group of the curve. 

The Galois action on Q(N,p) is known from Corollary 14.21 Now, the action 
by conjugation of PGL 2 (F p ) makes this group isomorphic to the automorphism 
group of PSL 2 (F p ). Hence, the canonical isomorphism Q(N,p) ~ PSL 2 (F P ) in- 
duces an isomorphism Aut (Q(N,p)) ~ PGL 2 (F P ) through which the Galois ac- 
tion on Q (N, p) can be described by the morphism 

//: G; ► Gal(VQ) - (V) PGL 2 (F P ). 

Consider then the 1-cocycles ^ = g^i] and = g[rj, where g*(cr) = 
and q'*{(t) = V g*(&) V for all a in Gq. The cyclotomic hypothesis allows us to 
regard them, through the above canonical isomorphism, as cocycles with values 
in Q(N,p). The cocycle condition for £, namely ^ UT = (, a %T for all a, r in Gq, 
can be easily checked case by case, depending on whether a and r belong to Gk p 
or not. The same holds for The cocycle £ defines a rational model X + (N,p) e 
for the corresponding twist of X + (N, p), together with an isomorphism 

X + (N,p) g — > X+(N,p) 

satisfying ip + = £, a a i/)+ for every o in Gq. Let us denote by X + (N, p)' and ip' + 
the analogous twist and isomorphism defined by the cocycle 

Theorem 5.2 There exists a (possibly fake) Q-curve of degree N realizing g 
if and only if the set of non-cuspidal non-CM rational points on the curves 
X + (N,p) g and X + (N,p)' g is not empty. In this case, the compositions of the 
isomorphisms ip + and ip' + with the natural map X + (N,p) — >X + (N) define a 
surjective map from this set of points to the set of isomorphism classes of: 

■ Q-curves of degree N up to Galois conjugation realizing g, 

■ fake Q-curves of degree N realizing g. 

This map is bijective if and only if the centralizer in PGL 2 (F P ) of the image of g 
is trivial. 
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Proof. The rational points on X + (N, p) e correspond via if) + to the couples of 
the form {P, w(P)}, where P is an algebraic point on X(N,p) such that, for each 
given automorphism a in Gq, either ^{"P) = P or ^ CT ( CT P) = w(P). 

Let P be a non-CM point in X(N,p)(Q) given by a triple (E, C, [T X ,T 2 } V ) . 
We use the basis [Ti,T 2 ] of E[p] to fix the isomorphism Aut (-Efp]) — GL 2 (F P ). 
By virtue of Proposition 14. 11 the condition °P = ^ o r 1 (P) for all a in Gq amounts 
to saying that {E, E/C} is a fake Q-curve of degree N such that the equality 



= U oj «M (i oj « 

holds in PGL 2 (F p ) for every a in Gq. Here, we extend the notation Qe to the 
case of elliptic curves over Q by putting g E = p E . 

If, on the other hand, there exists v in Gq for which £,v( u P) = w(P), then E 
must be a quadratic Q-curve for the point ^ ({P,w(P)}) on X + (N,p) g to be 
rational. Indeed, in this case the subgroup of Gq consisting of those automor- 
phisms a which satisfy £,a{ a P) — P has index two, so it is of the form G& for 
some quadratic field k, and then the condition °P = £~ 1 (P) for all a in G& forces 
the elliptic curve E and the subgroup C to be defined over k, while the condition 
w( u P) = ^ i 7 1 (P) gives an isogeny A : V E — >E with kernel V C. 

So assume now E and C to be defined over a quadratic field k and let A be 
an isogeny as above. Then, for a ^ G^, the point w( a P) is represented by the 
triple given by the elliptic curve E, the cyclic group C and the ify-orbit of the 
basis 

[(rVN)- 1 ^), (rVN)- l \(°T 2 )} if % P = (f 



{vrVN)- 1 \{°T 1 ),{vrVNy 1 \{°T 2 )]V if % p = Q 



.2 



This comes from Proposition 14.31 and the isomorphism V E j v C — > E induced by 
the isogeny A. Notice that the second case does not occur whenever k = k p . 

On the other hand, the automorphism is given by ^(a), if o G Gk p , or 
by V *^(cr), if a $ Gk p . Then, by applying Proposition 14.11 to each case, we 
obtain that the point ip+ ({P,w(P)}) on X + (N,p) g is rational if and only if 
condition holds for every a in Gq. 

Similarly, consider a point on X + (N, p)' corresponding via to a point 
on X + (N,p) obtained from a triple (E, C, [T 1 ,T 2 ]y). By the same reasoning as 
above, this point is rational if and only if the pair (E, C) represents a (possibly 
fake) Q-curve of degree N such that, for every a in Gq, 



Qb{<t) =V\[ oj g{a) \1 Oj V - (2) 

Let us now consider a (possibly fake) Q-curve of degree iV given by some 
point (E,C) on X (iV) and assume qe = Q. Since this is an equality up to 
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conjugation in PGL 2 (F p ), it amounts to the existence of a basis [T 1; T 2 ] of E[p] 
for which condition holds for every o in Gq. Moreover, we can suppose that 
such a basis is sent to either ( p or by the Weil pairing. In the first case, the 
image on X + (N, p) of the triple (E, C, [Ti,T 2 ]y) defines through a rational 
point on X + (N,p) g . In the second case, take [T^T^] = [Ti,T 2 ] V. For this new 
basis, which is sent to ( p under the Weil pairing, condition (j2J) is satisfied for 
every a in Gq. So the image on X + (N, p) of the triple (E, C, [T^T^v) defines 
through a rational point on X + (N, p)' g . 

This proves the first part of the statement, including the surjectivity of the 
map whenever it is defined. To discuss its injectivity, consider a point (E, C) 
on X (N) yielding a (possibly fake) Q-curve of degree N. Suppose that one can 
take two different rational points on the twists, corresponding (via ip + or ip' + ) 
to points on X + (N,p) obtained from two triples of the form (E, C, [T 1; T 2 ]y). 
Three different cases must be distinguished to complete the proof: 

• Both rational points are on X + (N,p) s if and only if there is a non-trivial 
element 7 in PSL 2 (F P ), representing a basis change in E\p], such that 

1 0) Q{a) (l 0) = 7 (l 0) 0{a) (l 0) 7_1 

for all a in Gq. This amounts to the existence of a non-trivial element in 
PSL 2 (F P ) commuting with all the elements in the image of g. 

■ The same characterization is obtained if both points lie on X + (N, p)' . 

■ One of the points is on X + (N, p) e and the other on X + (N, p)' Q if and only 
if there exists 7 in PSL 2 (F p ) such that 

for every a in Gq. This amounts to the existence of an element in PGL 2 (F P ) 
not lying in PSL 2 (F P ) and commuting with all the elements in the image 
of g. □ 

Note that the set of points in Theorem 15 .21 is always finite whenever the genus 
of X + (N) is greater than one. One can assure this for iV > 131 : indeed, the 
modular curve X (N) has genus at least two and is neither hyperelliptic |Ogg74 
nor bielliptic [Bar99| for any such integer N. Using Proposition 13.71 one actually 



gets the following improvement. 

Corollary 5.3 For N square mod p, the number of isomorphism classes of 
Q-curves of degree N realizing g is finite, except possibly in the case N = 4, p = 3. 
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For Q-curves of degree N realizing g, a different moduli description that gets 
rid of fake Q-curves can be given for every quadratic field of definition. In order 
to do that, we twist X(N,p) by two certain elements in the cohomology set 
H 1 (Gq,W(N,p)) that are naturally obtained from the above cocycles £ and £' 
as follows. By Proposition 13.11 and Corollary I4.4| the GQ-group W(N,p) equals 
the direct product of GQ-groups Q(N,p) x (w). Then, ^(Gq, W(N, p)) is also 
the direct product of the corresponding cohomology sets. Fix now a quadratic 
field k and take the Galois character 

Xk '■ Gq — > Gal(A;/Q) *l (w). 

We then consider the 1-cocycle £ Xk and the rational model X(N,p) Qt k for the 
corresponding twist, along with the isomorphism 

X(N,p) e , k — > X(N,p) 

satisfying ipk = (£xk)a Vfe f° r every cr in Gq. Analogously, let us denote by 
X(N,p)' k and ip' k the twist and the isomorphism defined by the cocycle £,'xk ■ 

Theorem 5.4 There exists a Q-curve of degree N defined over k realizing g 
if and only if the set of non-cuspidal non-CM rational points on the curves 
X(N,p) g ^k and X(N,p)' k is not empty. In this case, the compositions of the 
isomorphisms ipk and ip' k with the natural map X(N,p) — >X (N) define a sur- 
jective map from this set of points to the set of isomorphism classes of Q-curves 
of degree N defined over k realizing g. This map is bijective if and only if the 
centralizer in PGL^Fp) of the image of g is trivial. 

Proof. The rational points on X Qt k{N,p) correspond via ip k to the algebraic 
points P on X(N,p) such that 

f CT P for a E G k , 

£- (P) = < 

[ w{°P) for a £ G fe . 

The proof runs then in a very similar way to that of Theorem 15 .2\ so we omit the 
details. In the current case, a non-CM point on X(N,p) e % corresponding via ipk 
to a triple (E, C, [T!,T 2 ]y) is rational if and only if E is defined over k, there 
exists an isogeny from E to its Galois conjugate with kernel C and condition (0) 
holds for every a in Gq whenever one uses the basis \T\ , TJ\ to fix the isomorphism 
Aut (-E[p]) — GL2(Fp). The same characterization is valid for the rational points 
on X(N,p)' k if we replace ipk by ip' k and condition (JTJ by condition (J2J). □ 

Remark 5.5 One can check that £ and £' are cohomologous as 1-cocycles 
with values in Q(N,p) if and only if the centralizer in PGL^Fp) of the image of g 
does not lie in PSL 2 (F P ). Thus, the twists X + (N,p) e and X + (N, p)' g are not 
a priori isomorphic over Q. The same holds for the twisted curves X(N,p) Bt ] C 
and X(N,p)' k . Moreover, it can be shown that the involution w does not switch 
the rational points on X(N,p) et ). and X(N,p)' k , so finding the underlying 
Q-curves requires in general the rational points on both twists. 
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6 The twisted curve in the non-cyclotomic case 

Assume iV to be a non-square mod p. This section is the analogue of the previous 
one for the non-cyclotomic case. Unlike the cyclotomic case, now the quadratic 
field of definition for the potential Q-curves of degree N realizing a given projec- 
tive mod p Galois representation is fixed by the determinant. Moreover, only one 
twist is needed for the moduli classification of such Q-curves. We prove this in 
Theorem 16 . 41 b elow . For the sake of completeness, let us begin as before with the 
modular construction of the fixed field of the Galois representation qe attached 
to a Q-curve E of degree N. The procedure is now more intricate. 

Recall that the group W(N,p) of the covering X(N,p) — >X + (N) is canon- 
ically isomorphic to PGL 2 (F P ). The action by conjugation of this group makes 
it isomorphic to its automorphism group. Thus, by virtue of Corollary 14.21 and 
Corollary 14. 4[ the Galois action on W(N,p) is given by the morphism 

rj : Gq — > Gal(VQ) - H W(N,p), 

where we identify W(N,p) with its (inner) automorphism group. 

Let X(N,p) be the twist of X(N,p) defined by the 1-cocycle rj. Likewise, 
denote by X (N) the twist of X (N) defined by the 1-cocycle 

G Q — > Gal(VQ) - M- 

We write X + (N) for the quotient of X (N) by the involution corresponding 
to w N . Consider the following commutative diagram, where the morphisms are 
the natural ones: 

X(N, p)^+X(N, p) 
X (N)^^X (N) 

X + (N)^^X+(N) 

As remarked in the proof of the next lemma, the isomorphism X + (N) — >X + (N) 
is actually defined over Q. 

Lemma 6.1 The Galois covering X(N,p) — > X + (N) is defined over Q. 

Proof. Denote by 0: X(N,p) — ► X{N,p) and (f) : X (N) — ► X (N) the 
isomorphisms in the above diagram. They are defined over k p and satisfy 
= w and ^ocpQ 1 = w N for a $ Gk p - Then, the involution 4>q 1 w n 4>q 
on Xq(N) is defined over Q. Hence, so is the corresponding quotient map 
X (N) — >X + (N). The isomorphism 0+ : X+(N) — > X + (N) induced by fa 1 
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sends a couple {P, w N (P)} to {0 O 1 (P), <fi Q 1 w N (P)}. It is easily checked to satisfy 
a (f> + = (f> + for all cr in Gq. The same is true for the morphism X(N,p) — >X (N) 
induced from the natural map X(N,p) — >Xq(N) by the isomorphisms <fi and 0o- 
Finally, the automorphisms of the covering X(N,p) — >X + (N) are also defined 
over Q. Indeed, the relation $ <fi) = (f)~ l w (w d w) w <fi = (f)^ 1 d <fi holds 

for •§ G W(N,p) and o G" Gk p - For another proof of the existence of such a 
rational covering we refer to |Shi74j . □ 

Remark 6.2 The function field of X(N,p) over Q is identified, through the 
isomorphism <fi in the proof of Lemma 16.11 with a subfield of k p (X(N,p)). As 
shown in the following diagram, it is a Galois extension of Q (X + (N)) with group 
isomorphic to PGL 2 (F P ) : 



k p (X(N,p)) 




Q(X+(N)) 

Proposition 6.3 The function field Q(X(N,p)) gives, by specialization over a 
rational point on X + (N) corresponding to a Q-curve E, the fixed field of the 
representation qe- 

Proof. With the same notations as in the proof of Proposition 15.11 take a cyclic 
isogeny \i : E — ► V E with kernel C of order N. Consider the isomorphism 
(ft : X(N, p) — >X{N,p) in the proof of Lemma l6~Tl Let H be the subgroup of Gq 
fixing the points on X(N,p) corresponding through <ft to the points on X(N,p) 
of the form P or w(P), where P is given by a triple of the form (E, C, [T l5 T 2 ]y). 
We must show that H is the kernel of qe- For a point P as above, w(P) is repre- 
sented by the triple given by U E, V C and the ify-orbit of the basis [/i(Ti), /i(T 2 )]V. 
Using the definition of 0, we see that the group H consists of those a G Gk p sat- 
isfying °P = P and those a G" Gk p satisfying a P = w(P). Moreover, any such a 
lies in G& if and only if it lies in G& . Take now any automorphism a in Gq. 

2 

If X p = C* for some r in F * then a G H if and only if °P = P, namely if and 
only if a T = ±r T for all points T in E[p\. If % p = (p 2N 1 for some r in ¥*, then 
a G H if and only if a P = w(P), namely if and only if a T = ±r iV -1 /x(T) for all 
points T in E[p}. So the result follows from the definition of qe- □ 
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Suppose that we have now a Galois representation 

g : G Q — > PGL 2 (F p ) 

with non-cyclotomic determinant. Recall that any Q-curves of degree N real- 
izing g must be defined over the fixed field of e det g, where e is the character 
attached to k p (cf. Gorollarv 12. 5 J) . Denote this quadratic field by k. For the 
moduli classification of such Q-curves, we produce a twist of X(N,p) from a cer- 
tain element in the cohomology set H 1 (Gq, W(N, p)), as follows. The canonical 
isomorphism W(N,p) ~ PGL 2 (F p ) allows us to regard the projective represen- 
tation g* in Sectional as a morphism taking values in W(N,p). As before, let rj 
stand for the morphism giving the Galois action on W(N,p). Then, consider the 
1-cocycle £ = g^rj. For the twist of X(N,p) defined by £, we fix a rational model 
X(N, p) e along with an isomorphism 

if): X(N,p) e — X(N,p) 

satisfying if) = £ a a ip for every a in Gq. 

Theorem 6.4 There exists a Q-curve of degree N realizing g if and only if the 
set of non- cuspidal non-CM rational points on the curve X(N,p) g is not empty. 
In this case, the composition of if) with the natural map X(N,p) — > X + (N) 
defines a surjective map from this set of points to the set of isomorphism classes 
of Q-curves of degree N up to Galois conjugation realizing g. This map is bijective 
if and only if the centralizer in PGL^Fp) of the image of g is trivial. 

Proof. The first part of the proof goes along the lines of those of Theorem 15.21 
and Theorem 15.41 Let us fix an automorphism v in Gq\Ga;. The rational points 
on X e (N, p) correspond via if) to the algebraic points P on X(N,p) satisfying 

gJa) (P) = < 

1 w{°P) for a £ G kp . 

Note that the automorphism £>*(cr) _1 belongs to Q(N,p) if and only if a lies in 
either both G& and Gk p or none of them. In particular, a non-CM point P given 
by a triple (E, C, [Ti,T%\v) can satisfy the above condition only if E and C are 
defined over k and there is an isogeny A : V E — ► E with kernel V C. With these 
hypotheses on E and C, and for a £ G&, the point w( a P) is represented by the 
triple given by E, C and the ify-orbit of the basis 

[r-^X^^r^Xi-T^V if % p = (f 
[r~ l A(°Ti), r~ l X( a T 2 ) ] if % p = C^" 
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In the second case, and also for a G G fc fl Gk p , the automorphism g*(a) 1 is given 
by the matrix t g(o') i n PSL 2 (F P ). In the other case, and also for a G Gk\Gk p , 
the automorphism w g^a)^ 1 is given by the matrix V t g{c) in PSL 2 (F p ). So, 
taking as in the proof of Theorem 15.21 the basis [T 1; T 2 ] to fix the isomorphism 
Aut — GL 2 (F P ), condition Q is again seen to characterize the rationality 

of the point ip~ 1 (P). 

Consider now a non-CM elliptic curve E defined over k and an isogeny 
fi : E — > V E with kernel C, and assume Qe = Q- This equality amounts to the 
existence of a basis [Ti,T 2 ] of E[p] for which condition (0) holds for every a 
in Gq. We can further suppose that such a basis is sent to either ( p or Cp by 
the Weil pairing. In the first case, the point P on X(N,p) given by the triple 
(E, C, [Ti,T 2 ]v) defines through ip a rational point on X(N, p) e . In the second 
case, the triple ( U E, U C, [fi(Ti), ji{T 2 )}v) represents a point on X(N,p) lying above 
the same point on X + (N) as P and corresponding via ip to a rational point on 
X(N, p) e . Indeed, if we choose the basis [/j,(Ti), /x(T 2 )] to fix the isomorphism 
Aut( u E\p]) ~ GL 2 (F P ), we get the equality ^^(a) = Qe{&) for all a in Gq. 

Lastly, let us consider two different rational points on X(N,p) g corresponding 
via ip to non-CM points P and Q on X(N, p) with the same image on X + (N). Let 
the triple (E, C, [T 1; T 2 ]y) represent the point P and fix an isogeny \i : E — > U E 
with kernel C. We must then distinguish two cases for the point Q : 

■ It lies over the pair (E,C) on X (N) if and only if there is a non-trivial 
element 7 in PSL 2 (F p ), representing a basis change in E[p], such that 

(! ;)*>(: ;hg ;)««(! ^ 

for all a in Gq. This amounts to the existence of a non-trivial element in 
PSL 2 (F P ) commuting with all the elements in the image of g. 

■ Otherwise, a triple representing Q is given by the elliptic curve U E, the 
subgroup U C and the ify-orbit of a basis obtained from |/t(Ti), fi(T 2 )] V 
by a basis change preserving the Weil pairing. Thus, this case amounts to 
the existence of an element 7 in PSL 2 (F P ) such that 

for all cr in Gq. This is in turn equivalent to the existence of an element in 
PGL 2 (F p )\ PSL 2 (F p ) commuting with all the elements in the image of g. □ 

By the same reasoning as in Section the set of points in Theorem 16.41 is 
always finite whenever iV > 131. A stronger result is obtained from Corollary 13.51 

Corollary 6.5 For N non-square mod p, the number of isomorphism classes of 
Q- curves of degree N realizing g is finite, unless N = 2 and p = 3. 
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